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- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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earned patent term adjustment. See 37 CFR 1.704(b). 

Status 
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2a)D This action is FINAL. 2b)S This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1 935 CD. 1 1 , 453 O.G. 21 3. 

Disposition of Claims 

4) S Claim(s) 43 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 1-43 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)H The drawing(s) filed on 09 March 2004 is/are: a)S accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 
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application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 
Claim Rejections • 35 USC § 101 

1. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

2. The claimed invention recited in claim 17 is directed to non-statutory subject 
matter. The software recited in claim 1 7 is non-statutory per se, because it is not 
recited as embodied on the computer readable medium or used by the computer. 

Claim Rejections • 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

4. Claims 1-3, 5, and 17-19 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Ono (US 2002/0035685 A1). 

5. Referring to the instant claims, Ono discloses a client-server system with security 
function intermediary (see abstract). Ono teaches an intermediary device ensuring high 
security and lightening load on a client in a client-server system is disclosed. The 
intermediary device is provided between the server and the client. The intermediary 
device has a management table for storing security information indicating at least one of 
server authentication, client authentication, and encryption and decryption, and session 
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information regarding a session formed between the server and the client. The 
intermediary device performs appropriate security operation depending on a received 
message on behalf of the client (see abstract). 

6. Referring to the independent claim 1 , the limitation "at least first and second 
processing device and an interface, the first processing device transmitting a 
communication having a desired destination being the second processing device" is met 
by the client, the intermediary device and the server (see Fig. 3). The limitation "the first 
processing device also transmitting security information associated with the 
communication, the communication and security information being received by the 
interface" is met by the client transmitting the CRL data to the intermediary device (see 
Fig. 3). The limitation "the interface processing the security information and 
communication to identify an authorized or unauthorized condition" is met by teaching 
that the intermediary device has a management table for storing security information 
indicating at least one of server authentication, client authentication, and encryption and 
decryption, and session information regarding a session formed between the server and 
the client. The intermediary device performs appropriate security operation depending 
on a received message on behalf of the client (see abstract). The limitation "the 
interface transmitting the communication to the second processing device on 
identification of an authorized condition" is met by Fig. 9. 

7. Referring to the independent claim 17, the limitation "a storage device containing 
identifying information" is met by the intermediary device, which has a management 
table for storing security information indicating at least one of server authentication, 
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client authentication (see abstract and Fig. 3). The limitation "a first processing device 
receiving the identifying information from the storage device and transmitting the 
identifying information over a network; and an interface receiving the identifying 
information from the first processing device" is met by Fig. 9 (see certificate being send 
to the server). The limitation "an element for enabling the interface to conduct a 
comparison of the identifying information against stored identifying information" is met 
by Figs. 1 and 7, depicting the element, which compares the CRLs with the CRLs form 
the database. 

7. Referring to claims 2, 18 and 19, Ono teaches comparing the security information 
against stored security information and transmitting communication if there is a match 
(see Figs.1 and 3). 

8. Referring to claim 3, Ono teaches that security information is located in a 
database (see 109 in Fig. 1). 

9. Referring to claim 5, Ono teaches storing the security information in electronic 
form. 

10. Claims 34-38 and 43 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Lofgren (US 2001/0037313 A1). 

1 1 . Referring to the instant claims, Lofgren discloses a digital watermarking system 
(see abstract and Fig. 1 ). Lofgren teaches that watermarking is employed to facilitate 
secure online transactions. The system includes a user terminal and a central site. The 
user terminal includes a watermark reader, and a capture device to capture an image of 
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a watermarked document. The central site includes a database of image hashes. The 
user terminal communicates with the central site. The watermark reader reads a 
watermark and computes a hash of a captured image, and passes the hash to the 
central site for comparison with the database of image hashes (see abstract). 

12. Referring to the independent claim 34, the limitation "storing identifying 
information on a card" is met by card (12) in Fig. 1 . The limitation "reading the stored 
identifying information from the card" is met by reading the watermark from the card by 
unit 43 (in Fig. 2). The limitation "creating an authentication mark based on the stored 
identifying information; transmitting information along with authentication mark" is met 
by units 43 and 42 transmitting the information over the network (see Fig. 2). The 
limitation "receiving the information along with the authentication mark at first 
destination, verifying whether the information is authorized based on the authentication 
mark" is met by teaching that reader reads and extracts embedded data from the 
document. The embedded data is used to index or otherwise identify corresponding 
verification data. The corresponding verification data is preferably predetermined and 
stored for comparison (see lines 0069 and Fig. 2). 

1 3. Referring to claim 35, Lofgren teaches comparing verification data with stored 
verification data fro authentication (see lines 0069). 

14. Referring to claims 36, 37 and 43, Lofgren teaches identifying information being 
biometric information (see lines 0069) 
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15. Referring to claim 38, Lofgren inherently teaches a reader for reading the biometric 
information because the reader (43) reads the stored watermark information from the 
card, wherein the watermark comprises biometric information on it (see 0069). 

Claim Rejections - 35 USC § 103 

10. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

1 1 . Claims 4, 6-16, 20-33, 39-42 are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Ono (US 2002/0035685 A1) in view of Lofgren (US 2001/0037313 
A1). 

12. Referring to the instant claims, Ono discloses a client-server system with security 
function intermediary (see abstract). Ono teaches an intermediary device ensuring high 
security and lightening load on a client in a client-server system is disclosed. The 
intermediary device is provided between the server and the client. The intermediary 
device has a management table for storing security information indicating at least one of 
server authentication, client authentication, and encryption and decryption, and session 
information regarding a session formed between the server and the client. The 
intermediary device performs appropriate security operation depending on a received 
message on behalf of the client (see abstract). 
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13. Ono, however, does not teach the stored security information comprising the 
biometric information. Referring to the instant claims, Lofgren discloses a digital 
watermarking system (see abstract and Fig. 1). Lofgren teaches that watermarking is 
employed to facilitate secure online transactions. The system includes a user terminal 
and a central site. The user terminal includes a watermark reader, and a capture device 
to capture an image of a watermarked document. The central site includes a database 
of image hashes. The user terminal communicates with the central site. The watermark 
reader reads a watermark and computes a hash of a captured image, and passes the 
hash to the central site for comparison with the database of image hashes (see 
abstract). Lofgren also teaches that security information within the watermark can be 
verification data (e.g. retinal scan, voice recognition, biometric verification data) - see 
lines 0069. 

14. Therefore, at the time the invention was made it would have been obvious to one 
of ordinary skill in the art to modify the system of Ono for processing the information 
over network by using the security information comprising the biometric information 
stored on the crad as taught in Lofgren. One of ordinary skill in the art would have been 
motivated to modify the system of Ono for processing the information over network by 
using the security information comprising the biometric information stored on the crad 
as taught in Lofgren for guarding against granting access to a person who has found or 
stolen someone else's card (see Lofgren lines 0069). 
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1 5. Referring to claims 6 and 7, Lofgren teaches storage device comprising the card 
and the reader adapted to upload the security information from the card (see 43 in Fig. 
2). 

16. Referring to claim 8, Ono teaches that security information is transmitted over a 
network. 

1 7. Referring to claim 9, Lofgren teaches network being the internet. 

1 8. Referring to claims 1 0, 24 and 41 , it is well known in the art to use the GPS 
tracking device or IP address on the card. One of ordinary skill in the art would have 
been motivated to use GPS tracking device on the card for providing the location 
information. 

1 9. Referring to claims 11, 27, 33, Lofgren teaches the use of a PIN code (see lines 
0069). 

20. Referring to claims 12, 1 3, 28 and 29, Lofgren teaches the card having the photo 
or a digital image. 

21 . Referring to claim 1 5, Lofgren teaches communication being an email 
communication over the internet. 

22. Referring to claims 16 and 32, Lofgren teaches biometric information being voice 
print or retina scan (see lines 0069). 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Grigory Gurshman whose telephone number is 
(571 )272-3803. The examiner can normally be reached on 9 AM-5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571)272-3799. The fax phone number 
for the organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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Examiner 
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